authentication

LDAP Active directory authentication question

I am trying to authenticate users on my site with their LDAP credentials. However the bind to the active directory seems to require my credentials first before I can authenticate any other username/passwords. I don't want to hardcode my credentials in the application. Any suggestions? $self->authen->config( DRIVER => [ 'Authen::Simple...

WCF WebService Security: How do I use security on a WebService?

I created a simple .NET WebService (it just passes back a string). How do I modify the server side (and possibly the client side) so that it also uses a username/password to validate before sending a response? Client Code: static void Main(string[] args) { UpdateClient client = new UpdateClient("UpdateSOAPIIS"); client.ClientC...

Windows Authentication succeeds but IsAuthenticated == false

Environment is IIS 7 integrated pipeline, ASP.NET 4.0. I have a .aspx page configured without anonymous authentication and with windows authentication: <location path="auth/windows"> <system.webServer> <security> <authentication> <anonymousAuthentication enabled="false" /> <windowsAuthentication e...

.htaccess mod-rewrite conflicting with subfolder auth

I have a site which redirects all requests for files/folders which don't exist to an index file using .htaccess: RewriteCond %{REQUEST_FILENAME} -s [OR] RewriteCond %{REQUEST_FILENAME} -l [OR] RewriteCond %{REQUEST_FILENAME} -d RewriteRule ^.*$ - [NC,L] RewriteRule !admin/* index.php [NC,L] There is a folder "admin/" which has the f...

Linux PAM module in Java

I do have a custom authentication mechanism which is written in Java. I was wondering what would be the best way to implement a Linux PAM module without rewriting the code in C? I am aware of this list of available PAM modules but none of them are Java-related. There's also JPam but it does the opposite thing: it allows to get user/gro...

Pass user credentials between SharePoint web application and ASP.NET web application

I need to integrate my sharepoint site and ASP.net site. So, First login will occur in the SharePoint site with Active Directory authentication and from there i need to traverse to ASP.Net site through a link. Now my question is whether its possible to pass my SharePoint Active Directory credentials to ASP.Net site? Will i be able to do ...

Windows password Authentication with LDAP

I have a desktop application and i can get the domain username with authentication.getPrincipal().toString() code line.If the domain name and the user input matches exactly i granted all access to user .On the other hand , when the user types another username(which doesn't match the domain user name ) ,the programme checks the password i...

username:password in URL - how to handle this?

I found on Assembla's webhook tool possibility to integrate with twitter. To do this assembla uses such url: http://username:[email protected]/statuses/update.xml How twitter handles that kind of URL? Is this some standard? Does it require some special logic to perform login when someone POST data for URL with username:password? Ho...

How to setup up Single Sign On with a Windows 2008 RC2 and IIS7 server. [updated]

So a couple of weeks ago I installed an intranet solution for a client.. For this, they also wanted to integrate their (local) Active Directory with auto login (Single Sign On). After several tries and fails with Apache's solutions, I desided to use IIS7 on a Windows 2008 RC2. The problem was, I've had no experience with neither a Windo...

How to authenticate client based on possession of symmetric key?

Our clients call our web service over SSL and authenticate themselves with a username and password. Our server then generates a symmetric key and sends it back to the client. Then, the client establishes a TCP connection to our server, and sends a login message. At this point, I want to authenticate the client. My idea is to have the c...

How do you connect to a TFS server in C# using specific credentials?

I am attempting to write a c# application that connects to TFS and retrieves work item information. Unfortunately, it seems like all examples of using the TFS SDK are using the default credentials for the current user (i.e. my domain login information). The closest piece of information I found is to use the TeamFoundationServer (String...

Is there a standard for using credentials from one web app to automatically log in to a partner app?

I am developing a web app that will be working with other companies web apps. Part of the desired user experience is that users on our web application will be able to log into our app, and be able to visit our parters' web applications. Accounts will be automatically created for the users on our partners' sites. We'd like them to be able...

Integrating Active Directory in my asp.net website

In my website i want to use active directory users for authentication. how can i do this. ...

Need to force http to https and then only force user to login using htaccess and apache

I know how to force http to https, and I know how to use htpasswd to force someone to login to the site. But I need a combination of this. Basically the site needs to be forced to https, and then the authentication needs to happen. Therefore there will be no http access to the site whatsoever. Can anyone supply me with working htaccess ...

jaiku php oauth authentication

how i can i complete oauth authentication with php for jaiku? i completed authentications for google, facebook,friendfeed, etc. but for jaiku there is a problem. can you send an example for jaiku oauth? ...

Authenticating a WCF call from Silverlight using ADAM (AD LDS)

I have a Silverlight 4 client that invokes several WCF services. We want the communication to be encrypted using SSL (I have this part solved already) and that every call be authenticated against AD LDS (ADAM), do you have any simple example showing how to make this work? There's plenty of documentation on the oh-so-many WCF options but ...

Seam security with external authentication

Dear all, I use Seam 2.2.1.CR1 on Weblogic 10.3.2 (11g). I want to use an external SSO (the proprietary one Oracle provides, based on OID). I would like to integrate this external login (the login screen belongs to the SSO). Please note that I don't want to use an LdapStore. If I got this right, this would require me to have a login pag...

Authentication / Authorization in JSF web application ?

I found there are 2 types of authentication mechanism in JSF. JASS Container managed (please correct if I am wrong) I tried searching for a better tutorial that guide to learn any of those method. Unfortunately I was ended up in many of uncompleted lessons. Can any one provide me a solid tutorial or any guide where I can catch the r...

One Java EE web application with two auth-methods

Hi, I have a web-app that authenticates against a JDBC Realm. In the web.xml file I can use BASIC authentication or a custom form: <auth-method>BASIC</auth-method> <realm-name>JDBCRealm</realm-name> or <auth-method>FORM</auth-method> <form-login-config> <form-login-page>/login.html</form-login-page> <form-error-page>/error...

Is it possible to set Apache Basic Authentication to lock a directory, except for one file?

I'm working on an upcoming project, but the team needs to access it online. I've setup (for now) Basic Authentication using: <Directory /var/www/html> AuthType Basic AuthName "Staging" AuthUserFile /etc/passwd Require valid-user </Directory> But, I need one file to be publically ...